LogoutResponse

Roehrl Patrick patrick.roehrl at inet-logistics.com
Fri Aug 12 05:21:17 EDT 2016


Hello,

I'm nearly done with the upgrade from IdP 2 to 3.2.1, one last thing:
The IdP2 answered to an LogoutRequest with a LogoutResponse on successful logout.
In my tests with IdP3, the IdP destroyed the session at the IdP and showed me a successful logout page but didn't sent a LogoutResponse. Due to the session gets destroyed I think that my logout is correctly configured at the IdP.
Is that the normal behavior? Or is it possible to configure the IdP to send a LogoutResponse?

Didn't find something about LogoutResponse in the Wiki.
Here (http://shibboleth.net/pipermail/users/2016-April/028726.html ) I found that the logout outs ends always at the IdP, so perhaps the behavior to LogoutRequests has changed?

Thanks for your help! Greets Patrick


P.S. Here my actual config:
# Set to false to disable the IdP session layer
idp.session.enabled = true

# Set to "shibboleth.StorageService" for server-side storage of user sessions //old value ClientSessionStorageService
idp.session.StorageService = shibboleth.StorageService

# Size of session IDs
#idp.session.idSize = 32
# Bind sessions to IP addresses
#idp.session.consistentAddress = true
# Inactivity timeout
#idp.session.timeout = PT60M
# Extra time to store sessions for logout
#idp.session.slop = 0
# Tolerate storage-related errors
#idp.session.maskStorageFailure = false
# Track information about SPs logged into
idp.session.trackSPSessions = true
# Support lookup by SP for SAML logout NOTE:PRO80 doesn't work with client side storage!
idp.session.secondaryServiceIndex = true
# Length of time to track SP sessions
idp.session.defaultSPlifetime = PT2H
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160812/a487b825/attachment.html>


More information about the users mailing list